Re: SPF Record Issue

At 18:00 09/09/2013  Monday, Roman Gelfand wrote:
>The ip it failed on is 24.38.11.30.
>
>In fact, the helo host name doesn't resolve to this address.  Based on
>what you mentioned in you previous post, I suppose this is the issue.

shouldn't cause the fail that it did though (but could be a bug in googles reporting)

as the helo pmx1.unbeatablesale.biz has no spf record to fail
but should have "v=spf1 ip4:24.38.11.30 -all"
or "v=spf1 a -all" if you also fix the a record ;)



>Received: from pmx1.unbeatablesale.biz (mmxr02.unbeatablesale.biz.
>[24.38.119.30])
>        by mx.google.com with ESMTP id z10si422023qas.154.1969.12.31.16.00.00;
>        Mon, 09 Sep 2013 06:05:42 -0700 (PDT)
>Received-SPF: fail (google.com: domain of [email protected] does
>not designate 24.38.119.30 as permitted sender)
>client-ip=24.38.119.30;
>Authentication-Results: mx.google.com;
>       spf=hardfail (google.com: domain of [email protected]
>does not designate 24.38.119.30 as permitted sender)
>[email protected]

those results do suggest that it was an envelope sender fail
(it could be one cached from an earlier version of your spf)

but unlikely as it says this spf has been unchanged since 2013 08 29 02
and it has only a 8 hour cache
unless it has been changed since and the old soa is making google ignore the updates

either way diagnostic fix is to update the A for
pmx1.unbeatablesale.biz to point at 24.38.119.30 (and whatever other ips it has)
add a txt for
pmx1.unbeatablesale.biz  "v=spf1 ip4:24.38.11.30 -all"
update the soa for unbeatablesale.biz

try again

then update the soa for unbeatablesale.com

then try again in 8 hours

if it works it was likely one or the other ;)




>On Mon, Sep 9, 2013 at 12:48 PM, alan <[email protected]> wrote:
>> At 17:10 09/09/2013  Monday, Roman Gelfand wrote:
>>>Yep, you are right.  The domain name is unbeatablesale.com
>>
>> ok
>> unbeatablesale.com      text = "v=spf1 ip4:98.136.0.0/14 ip4:24.187.208.80/29 ip4:24.38.11.24/29 ip4:108.58.151.0/29 -all"
>>
>> that is
>> 98.136.0.0 - 98.136.196.255 (wow)
>> 24.187.208.80 - 24.187.208.87
>> 24.38.11.24 - 24.38.11.31
>> 108.58.151.0 - 108.58.151.7
>>
>> now what ip is appearing to fail?
>>
>> as no there is no limit on the number of subnets other than the limits of how many text characters in a typical dns txt reply
>> (you are way short of running into this limit thus not a concern)
>>
>> could you include the pass/fail output of whatever tester was in use?
>>
>> as it could be reporting not the failure of the spf check on the sender
>> [email protected]
>> but an spf fail on the domain in the sending systems helo-id (which is a separate test entirely)
>>
>>
>>
>>
>>>On Mon, Sep 9, 2013 at 12:01 PM, Stuart Gathman <[email protected]> wrote:
>>>> On 09/09/2013 11:52 AM, Roman Gelfand wrote:
>>>>>
>>>>> I have added the spf text record, below.  The first and second subnets
>>>>> are being checked.  However, when sending email from 3rd and 4th
>>>>> subnet, spf check fails.  Does this mean only 2 subnets could be
>>>>> specified.  If so, what to when there is more subnets?
>>>>>
>>>>> v=spf1 ip4:xx.xxx.0.0/14 ip4:24.yy.yyy.yyy.80/29 ip4:zz.zz.zz.24/29
>>>>
>>>>    The second ip4 has 5 octets.   That MUST get PermErr for any IP (but
>>>> whatever you are checking with may not be fully conformant.) On the other
>>>> hand, that may just be a typo when obfuscating the record.  You are
>>>> publishing the record in DNS, for crying out loud, so just give us the
>>>> actual record.  Also, people sometimes have trouble with TXT records on
>>>> their DNS host, so you should load the record into a test.yourdomain.com
>>>> domain on the same DNS server you will be using for production.  Then we can
>>>> check that it is actually served correctly.
>>>>>
>>>>> ip4:uuu.uu.uuu.0/29 -all
>>>>
>>>>
>>>>
>>>>
>>>> -------------------------------------------
>>>> Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>>>> Modify Your Subscription: http://www.listbox.com/member/
>>>> [http://www.listbox.com/member/]
>>>>
>>>> Archives: https://www.listbox.com/member/archive/735/=now
>>>> RSS Feed: https://www.listbox.com/member/archive/rss/735/24896328-acfdfa29
>>>> Modify Your Subscription:
>>>> https://www.listbox.com/member/?&
>>>> Unsubscribe Now:
>>>> https://www.listbox.com/unsubscribe/?&&post_id=20130909120211:2B4082F0-1969-11E3-B924-E2C56875045B
>>>>
>>>> Powered by Listbox: http://www.listbox.com
>>>
>>>
>>>-------------------------------------------
>>>Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>>>Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>>>
>>>Archives: https://www.listbox.com/member/archive/735/=now
>>>RSS Feed: https://www.listbox.com/member/archive/rss/735/13124949-ec5a0568
>>>Modify Your Subscription: https://www.listbox.com/member/?&
>>>Unsubscribe Now: https://www.listbox.com/unsubscribe/?&&post_id=20130909121059:682580A2-196A-11E3-AEC7-E0792EE61468
>>>Powered by Listbox: http://www.listbox.com
>>
>>
>>
>> -------------------------------------------
>> Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>> Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>>
>> Archives: https://www.listbox.com/member/archive/735/=now
>> RSS Feed: https://www.listbox.com/member/archive/rss/735/24896328-acfdfa29
>> Modify Your Subscription: https://www.listbox.com/member/?&
>> Unsubscribe Now: https://www.listbox.com/unsubscribe/?&&post_id=20130909124817:9E65463E-196F-11E3-9A41-BF4B57BB7C94
>> Powered by Listbox: http://www.listbox.com
>
>
>-------------------------------------------
>Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>
>Archives: https://www.listbox.com/member/archive/735/=now
>RSS Feed: https://www.listbox.com/member/archive/rss/735/13124949-ec5a0568
>Modify Your Subscription: https://www.listbox.com/member/?&
>Unsubscribe Now: https://www.listbox.com/unsubscribe/?&&post_id=20130909130024:4E5D6DC2-1971-11E3-932D-84D22AAAEFF8
>Powered by Listbox: http://www.listbox.com